GO-2026-4601 vulnerabilities

Vulnerabilities for packages: argo-events, rancher-security-scan, kubernetes-csi-driver-hostpath, kubevela, pluto, crossplane-provider-aws-rds, thanos, cilium-envoy, speedtest-go, aws-privateca-issuer, undock, nri-jmx, rancher-system-upgrade-controller, sftpgo-plugin-auth, kube-rbac-proxy, trino,...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: opa-envoy, gitlab-runner, crossplane-provider-azure-storage, docker-cli-buildx, azure-workload-identity-webhook, nri-prometheus, vault-benchmark, crossplane-provider-aws-sns, argo-events, lazydocker, harbor, kubevela, ingress-nginx-controller,...

GO-2026-5037 vulnerabilities

Vulnerabilities for packages: opa-envoy, gitlab-runner, crossplane-provider-azure-storage, docker-cli-buildx, azure-workload-identity-webhook, nri-prometheus, vault-benchmark, crossplane-provider-aws-sns, argo-events, lazydocker, harbor, mongo-tools, kubevela, ingress-nginx-controller,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: gitlab-runner, aws-signer-notation-plugin, azure-workload-identity-webhook, timescaledb-parallel-copy, vault-benchmark, crossplane-provider-aws-sns, external-dns, fluxcd-kustomize-mutating-webhook, clickhouse-operator, nri-f5, kubernetes-dns-node-cache,...

GHSA-FF52-PH69-CF7X vulnerabilities

Vulnerabilities for packages: gitlab-runner-fips, volsync, crossplane-provider-aws-datapipeline, kube-metrics-adapter, frankenphp-8.3, node-feature-discovery-fips, rancher-fleet, crossplane-provider-aws-swf-fips, thanos-operator, gostatsd, athenz-csi-driver-fips, dcgm-exporter, cosign-fips,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: opa-envoy, argo-events, nri-f5, kubernetes-csi-driver-hostpath, pluto, helm-mapkubeapis, k3s, kube-vip, manifest-tool, gcsfuse, speedtest-go, aws-privateca-issuer, flannel, hcloud, hugo, rancher-system-upgrade-controller, gh, nri-haproxy, sftpgo-plugin-auth, kubewatc...

CLEANSTART-2026-DG06447 Security fixes for CVE-2025-47911, CVE-2025-58190, CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-61732, CVE-2025-68119, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142 applied in versions: 2.12.2-r0, 2.12.2-r1

Multiple security vulnerabilities affect the kubernetes-replicator-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-5MH9-3JWC-RP59 vulnerabilities

Vulnerabilities for packages: wave-fips, sonobuoy, rootlesskit-fips, newrelic-nri-kube-events-fips, distribution-fips, kube-rbac-proxy-fips, kube-metrics-adapter, kubeflow-katib, node-feature-discovery-fips, prometheus-node-exporter-fips, thanos-operator, gitlab-rails-ce-fips,...